3 ms·
Why does Linux require root for this if you can do it anyway?
by IshKebab 11mo ago
Why does Linux require root for this if you can do it anyway?
- kvdveer 11mo agoLinux requires root for raw sockets, which _can_ be used to send pings, but also numerous other things. The trick used here only allows pings. This trick is gated behind other ACLs.
- deleted 11mo ago[deleted]
- thomashabets2 11mo agoIt doesn't. For users in the UID range in sysctl `net.ipv4.ping_group_range` the normal ping command uses this non-root way. Sure, maybe your system still sets suid root on your ping binary, or shows it adding `cap_net_raw` according to `getcap`, but mine does not.